This article explains how to create and renew an Apple Push Notification service (APNs) certificate. It also explains how to upload an APNs certificate to Jamf Pro.
Jamf Pro v9.0 and later
For complete instructions, see the following resources:
A video walkthrough of Generating an Apple Push Notification Certificate can be found here.
A video walkthrough of Renewing an Apple Push Notification Certificate can be found here.
APN no longer requires Enterprise Developer Program membership. Create. CSR IN keychain, save it to a file, and email it to firstname.lastname@example.org. Request that it be signed and returned. The returned certificate can be put into the JSS.
If you are running 8.43 it's even easier than that. The mighty fine folks at JAMF tied in your JAMF Nation account to allow you to create the CSR from them to send to Apple. Just go to Settings -> Global Mgmt -> Push Notification Cert and follow the onscreen directions for getting a new cert. You'll need your JAMF Nation user name and password, and from there it's pretty straight forward.
We used the developer program to get the cert a year ago.
It expired yesterday (found out when I could no longer enroll devices) and after troubleshooting for awhile.
Today JAMF support explained how they can give me a free cert using the JAMF Nation account, but it will mean we need to reenroll all of our iOS devices. Ugh.
I'm torn what to do. We still have a developer account, renew that cert so I don't need to re-enroll our 160 devices... and hope that option sticks around for next year. Or we can switch now to the free cert now and bite the bullet and be forced to go re-enroll devices.
Does anyone know if the developer account cert will continue to be available?
Anybody seen in the CSR assistant, when I enter my Jamf Nation id, it says my Jamf nation account has not been verified ? Obviously it has as I am posting here...
i have the same issue. 8.43 and trying to set it up via JAMF Nation.
Hi Everyone \-
Please make sure your Company Email Address is correct in your profile. It must match up with our internal records so we can verify you are a customer.
If it still isn't working and the correct address is in your profile, please let your account manager know and we will get you up and running.
thanks jake, I have emailed Ben Graham and Keith Jones. I am on a trial account.
There are now video tutorials for generating and renewing your APNs certificate!- Generating an Apple Push Notification (APNs) Certificate in Jamf Pro- Renewing an Apple Push Notification (APNs) Certificate in Jamf Pro
I'm picking up from the previous IT administrator and don't know which account generated the original cert. What is the best way to renew the cert? Delete the existing cert and generate a new one? Anything else that needs to be done to the devices that are already managed? Thanks.
Hey @itadmin-tps !
We’re you able to find what you needed regarding the push cert? I noticed your comment so wanted to make sure we were able to help as needed.
@john.miller Hey we're not quite there yet BUT in the new year our APNs cert will require updating and the guy who did it originally has now left the company. what's the best way for us to renew it? Really conscious I don't want all our machines to drop out of management so just want to check, double check and triple check that we will be doing it the right way.